RFC 8439, "ChaCha20 and Poly1305 for IETF Protocols", June 2018Source of RFC: IRTF
Errata ID: 6569
Publication Format(s) : TEXT
Reported By: David Reed
Date Reported: 2021-05-03
Section 2.3 says:
o A 32-bit block count parameter, treated as a 32-bit little-endian integer.
It should say:
o A 32-bit block count parameter, treated as a 32-bit integer.
The block count is not used as a little-endian integer. An example of this can be seen in the example test vector in section 2.3.2, where Block Count = 1, but the block count word of the initial state is 00000001.